liuyuit/pay

Registry deprecationdanger

Packagist marks the entire package as abandoned and names liuyuit/xy-pay-sdk as its replacement. Package-level abandonment is a severe dependency health risk.

Release historydanger

The package has 132 releases and a historically frequent 3.9-day median interval, but its latest release was March 28, 2022, with zero releases in the last 12 months. The long inactivity outweighs its earlier release history.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's multi-year release pause. This indicates a strong abandonment risk.

Security policycaution

No security policy is present in the repository. This is a transparency gap, and the lack of recent maintenance makes security issue handling less clear.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but its one action reference is unpinned. That is a limited reproducibility and supply-chain hygiene concern, not a standalone severe risk.